Vendor
The Flying Images plugin (versions n/a through 2.4.15) contains a Stored Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.